Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddc55dba-be73-3633-b800-e35b0a859feb.roa
File: ddc55dba-be73-3633-b800-e35b0a859feb.roa (raw, json)
Hash identifier: g/6QLfQnLOvXWak4HiPfHFot5QZvyv/kfSE/+CHexCQ=
Subject key identifier: 58:CD:3E:CE:C7:F8:96:D1:B9:B5:D8:DB:27:05:41:37:BE:F3:FD:B4
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F43285849B5E0B6E08570E804D204E040
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddc55dba-be73-3633-b800-e35b0a859feb.roa
Signing time: Thu 01 May 2025 16:27:54 +0000
ROA not before: Thu 01 May 2025 16:27:54 +0000
ROA not after: Wed 30 Jul 2025 16:27:54 +0000
asID: 22773
IP address blocks: 72.222.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 May 2025 21:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:b5:e0:b6:e0:85:70:e8:04:d2:04:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: May 1 16:27:54 2025 GMT
Not After : Jul 30 16:27:54 2025 GMT
Subject: CN=339e1e2c-b775-459a-b85c-3c168122681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:dc:36:be:74:ef:3e:91:a3:3d:9d:b8:4d:
c3:9a:6d:36:9f:22:06:ef:55:7c:dd:33:5c:cd:89:
34:51:03:54:6c:44:15:25:dc:c6:32:f1:75:34:fc:
3c:5e:08:d8:0f:97:83:e8:6e:66:f5:a4:6c:95:d0:
d1:36:63:ef:99:84:a3:5e:41:97:86:39:f9:4c:7a:
6e:12:3f:cb:b5:79:33:5f:2f:6b:3f:fb:aa:32:d9:
8a:e8:f5:2a:4f:4a:0d:23:de:b5:c7:c5:7d:04:e9:
d7:b0:1a:03:3f:bb:60:ed:dd:c2:bd:4d:81:7a:eb:
45:0f:b1:48:19:59:96:06:ea:26:76:6d:35:01:7c:
eb:d0:00:2d:bd:fd:c8:f3:0a:51:5e:a0:d5:29:88:
05:b1:6f:3b:38:fe:27:1e:56:36:52:ae:28:c6:54:
33:b6:6a:8a:42:ad:f9:ab:ce:77:6f:c5:93:e9:5a:
c0:c5:e2:9c:07:b8:f4:09:7a:b0:4c:e4:24:0a:58:
f7:0d:45:23:df:0b:3e:55:20:83:ff:16:65:7c:7b:
41:ac:8f:cd:78:e7:56:70:75:aa:ce:f2:30:bb:02:
03:5e:ad:ef:32:2b:33:7c:b2:cf:47:db:d5:78:09:
f2:a5:d5:2d:5b:28:46:dd:9e:44:7f:fe:cb:af:c0:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:3E:CE:C7:F8:96:D1:B9:B5:D8:DB:27:05:41:37:BE:F3:FD:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddc55dba-be73-3633-b800-e35b0a859feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.222.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:42:c4:1b:43:c1:82:00:53:ab:5f:07:51:84:ed:a0:66:c2:
3b:e1:e5:dc:26:c7:bd:f2:b6:7a:40:34:ce:0c:94:43:65:61:
4e:87:66:33:92:a1:1a:78:b5:30:15:0d:10:8c:ed:31:f3:db:
a1:a5:d1:3a:02:b7:ea:ae:cb:ee:e3:9e:9c:06:8d:db:81:3a:
b2:2c:1f:e2:71:e1:15:d2:10:f9:2a:ee:2b:05:2d:df:3a:a4:
23:ed:d5:21:3b:47:4b:43:09:96:23:28:98:00:a8:12:c6:cc:
b0:67:9c:64:94:7e:e7:66:27:24:06:a3:fd:6f:8d:40:8c:8d:
2a:3c:2d:46:7a:72:c9:8f:34:64:02:8d:c2:e4:88:c7:dd:39:
1b:59:dc:01:a7:25:11:d4:fb:d2:62:b2:cf:a4:85:d3:d4:6e:
17:a8:0f:4d:9e:2b:aa:8b:ef:25:6b:e3:7e:19:40:3d:68:66:
d8:46:18:d9:93:e0:4c:fb:8d:3d:19:fc:9e:38:34:00:37:22:
0b:39:82:cc:79:59:2c:fc:09:37:cc:08:1f:37:66:e7:f6:2b:
5b:a5:9c:f4:a2:71:d1:95:2f:c6:73:8a:60:ba:21:42:29:7f:
7f:2e:92:6a:0b:02:02:bb:71:6d:83:16:ea:02:bd:af:6c:da:
3d:44:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:24:31 2025 by rpki-client